Riseup.net has a fairly extensive discussion: https://riseup.net/en/security/message-security https://riseup.net/en/security/message-security FSF is a bit mor

Riseup.net has a fairly extensive discussion: https://riseup.net/en/security/message-security https://riseup.net/en/security/message-security FSF is a bit more to the point for the casual user: * https://emailselfdefense.fsf.org/en/ https://emailselfdefense.fsf.org/en/ It is not always clear to the casual user if they are using gpg1 or gpg2. You pretty much always want to use gpg2. This is a genuine issue with the gpg ecosystem.